Frequently asked questions about cybersecurity, Microsoft and IT services

Question 1

What cybersecurity services does a business need?

Accepted Answer

The answer depends on its assets, risks and obligations. An assessment helps prioritize testing, controls and training.

Question 2

What is the difference between a pentest and a vulnerability assessment?

Accepted Answer

An assessment identifies known weaknesses; a pentest validates possible exploitation paths in a controlled way.

Question 3

How often should a business perform a pentest?

Accepted Answer

Frequency depends on changes, exposure and criticality. A review is recommended for new platforms or material changes.

Question 4

What does a cybersecurity assessment include?

Accepted Answer

It reviews assets, configurations, controls and risks to define a path for improvement.

Question 5

How can I tell whether Active Directory has security issues?

Accepted Answer

Review privileges, inactive accounts, Group Policy, replication, DNS and domain controller configurations.

Question 6

What does an Active Directory Health Check include?

Accepted Answer

It assesses status, configuration, risks, replication, DNS and improvement opportunities for the environment.

Question 7

Is Microsoft 365 secure by default?

Accepted Answer

It includes security capabilities, but requires configuration, identity governance and ongoing review.

Question 8

How can I improve Microsoft 365 email security?

Accepted Answer

Strengthen MFA, anti-phishing, forwarding rules, domains and user training.

Question 9

What does an IT infrastructure Health Check include?

Accepted Answer

It reviews inventory, capacity, risk, configuration, availability and modernization opportunities.

Question 10

Should I keep on-premises servers or move them to the cloud?

Accepted Answer

The decision depends on workloads, data, cost, latency, continuity and operational capabilities.

Question 11

Azure or AWS: which is better for a Microsoft-focused business?

Accepted Answer

Azure often integrates naturally with Microsoft ecosystems, but every workload should be evaluated independently.

Question 12

How should I design backup and disaster recovery?

Accepted Answer

Define critical assets, ownership, backup copies, restore tests and recovery priorities.

Question 13

What should a specialist Microsoft support provider offer?

Accepted Answer

Strong diagnostic capabilities, defined scope, clear communication and experience that fits your environment.

Question 14

Can I hire specialist IT support without outsourcing all operations?

Accepted Answer

Yes. Support can focus on complex issues, assessments or defined projects.

Question 15

Does Sánchez IT Ingeniería serve outside Bogotá?

Accepted Answer

We serve Colombia and projects across Latin America according to the agreed scope.

Question 16

How can I request an assessment or technical consultation?

Accepted Answer

Share your needs through our contact page to define the next technical step.

Cybersecurity